JP2008213294A - Printer wireless connectable to external terminal device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve wireless communication and to restrict connection to a terminal device except a specific one. <P>SOLUTION: This printer comprises a communication device 13, a display device 14 and an input device 15, and can perform wireless communication with a terminal device. The printer further comprises a control section 100 and a memory section 105. The control section 100 includes an authentication information generation section 103 for generating authentication information to be used for the wireless communication and a connection management section 104 for managing the connection by using connection terminal information 1051 stored in the memory section 105. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a printer that can be wirelessly connected to an external terminal.

Various standards for realizing wireless data communication between terminals such as printers, digital cameras, mobile phones, and personal computers are known. For example, wireless LAN such as IEEE 802.11
There are standard standards. Also, standards for strengthening the security functions of these standards are known. For example, there is a standard using IEEE802.1x.

When using the wireless LAN security function, it is necessary to set setting information such as information on the network (network type, SSID, etc.) and information on encryption (WEP, WPA, password, etc.) in each terminal. The setting operation is complicated. For this, an industry group has proposed an easy setting standard that simplifies the setting of the security function of the wireless LAN. As one of the simple setting standards, PIN (P
There is a method using a personal identification number) code. This is the PIN set for the terminal (Enrollee) newly connected to the wireless LAN.
By combining the code with the PIN code set in the terminal (Registrar) that manages the wireless LAN, the setting information is automatically transmitted and received, and the connection using the security function is established.

On the other hand, terminals such as printers and digital cameras have poor interfaces for inputting characters and the like. And since operation which sets the setting information required in order to establish wireless data communication is complicated, it is difficult to establish communication. About this, in patent document 1,
When direct communication is performed between terminals, the authentication information displayed by the connection destination terminal equipped with the display device or the printed authentication information is photographed, and the wireless connection with the connection destination terminal is established using the authentication information. A digital camera is described.

JP2004-15284

In direct communication (ad hoc mode) between wireless LAN terminals, one terminal to communicate with requires authentication information (setting information or PIN code in the case of simple setting standards) for connection.
, And the other terminal can capture the displayed authentication information and establish a wireless LAN connection using the authentication information. For example, it is effective between terminals such as printers and digital cameras with a simple interface.

However, since the displayed or printed authentication information can be taken by anyone, there is a risk that it will be taken by a malicious person. The person may connect to the connection destination terminal using the authentication information, and personal information or confidential information may be copied or deleted.

An object of the present invention is to provide a technique for improving security by enabling wireless LAN communication in direct communication between terminals with a simple interface and restricting connections other than a specific terminal.

In order to solve the above problem, a first aspect is a printer that performs wireless communication with an external terminal, and performs wireless communication with an input device that receives a user operation, a display device that displays screen information, and the like. A communication device, a storage device for storing identification information for identifying the connected terminal, and a central processing unit having a function of controlling wireless communication, wherein the central processing unit is the terminal A connection management means for managing the connection to and an operation for generating authentication information used for wireless communication is received via the input device to generate the authentication information, and the authentication information is sent to the display device Authentication information generating means for displaying, and when the communication apparatus establishes a wireless communication connection with the terminal using the authentication information, the connection management means stores the identification information of the connection. In the subsequent wireless communication connection process, it is determined whether the identification information stored in the storage device matches the identification information used in the wireless communication connection process. In this case, the wireless communication connection process is terminated in the communication device. In addition, when the communication device establishes a wireless communication connection with the terminal using the authentication information, the connection management unit determines the identification information of the connection,
While storing in the said memory | storage device, it can be set as the structure which invalidates the display of the said authentication information displayed on the said display apparatus.

In the printer, the identification information may include the authentication information and a MAC address of the terminal.

Further, in the printer, the authentication information generation unit receives an operation for generating one of the first authentication information and the second authentication information via the input device and outputs authentication information corresponding to the operation. When the communication device establishes a wireless communication connection with the terminal using the first or second authentication information, the connection management means stores the identification information of the connection in the storage device. In addition, when the communication device disconnects the wireless communication connection using the first authentication information, the identification information corresponding to the connection can be deleted from the storage device.

In the printer, the display device includes an item for displaying the first authentication information, a first screen having an item for displaying the second authentication information, and the authentication information generating unit. And a second screen having an area for displaying the authentication information generated by.

  The first embodiment will be described below with reference to the drawings.

FIG. 1 is a block diagram showing an outline of a system to which the first embodiment is applied and an internal configuration of a printer.

The printer 1 includes a CPU 10, a RAM 11, a flash memory 12, a communication device 13, a display device 14, an input device 15, an image processing unit 16, and a print engine 17. The printer 1 communicates wirelessly with an external terminal such as the digital camera 2 via the communication device 13. A terminal such as the digital camera 2 transmits print data to the printer 1, and the printer 1 prints the received print data.

The digital camera 2 has a simple input interface, for example, a minimum necessary key such as a direction key or a determination key. The digital camera 2 performs processing for analyzing photographed image data and extracting character string authentication information. Further, the authentication information is used for wireless LAN connection and communication with the printer 1. In the present embodiment, the digital camera 2 is taken as an example, but the present invention is not limited to this. Any terminal that can perform imaging processing, authentication information extraction processing, wireless LAN connection, and communication processing may be used. For example, a mobile phone, a portable information terminal, or the like may be used.

The authentication information is different information for each terminal, for each connection, and for each user. For example, wireless LAN setting information, or a PIN code in the case of simple setting standards. Since these pieces of authentication information are used for encryption / decryption of data to be transmitted / received, authentication, etc., it is necessary to set the same contents between the terminals performing communication. In the present embodiment, the same authentication information needs to be set in the printer 1 and the digital camera 2.

The CPU 10 is a central processing unit that executes various programs and controls various devices. The RAM 11 is a storage device for storing programs to be executed and temporary data. A rewritable nonvolatile memory, for example, a flash memory 12 is a storage device that stores programs, data, application programs, and the like used for controlling the printer 1. In addition, a hard disk or the like can be used. In the present embodiment, the printer 1 stores identification information of a plurality of connection partner terminals in the flash memory 12. This is because the identification information needs to be read and written, and the identification information must be retained when the printer is restarted. The identification information will be described later.

The communication device 13 is an interface for transmitting / receiving data to / from an external terminal, and is configured in accordance with a wireless LAN standard. For example, the physical layer and the MAC layer are controlled, and data is transmitted and received wirelessly. The CPU 10 sets wireless LAN setting information and authentication information, and notifies the CPU 10 of control information related to wireless LAN connection and communication, or the CPU 10
Get from.

The display device 14 is a device that displays a screen for allowing the user to browse, and includes, for example, a liquid crystal display (LCD). The input device 15 is a device for accepting an operation to the printer 1 and includes, for example, letters, numbers, direction keys, and the like. A touch panel having both display and input functions may be used.

The image processing unit 16 converts the input image data into printable data by performing processing such as halftoning and outputs the data to the print engine 17. The print engine 17 performs printing on paper according to the received print image data.

FIG. 2 is a block diagram illustrating functions of the printer to which the first embodiment is applied. In the present invention, since printing is not a main function, description of functions related thereto is omitted.

  The printer 1 includes a control unit 100 and a storage unit 105.

The control unit 100 controls the communication device 13, the display device 14, the input device 15, and the storage unit 105, and controls the entire printer 1. The control unit 100 is realized, for example, by reading a program stored in advance in the flash memory 12 (see FIG. 1) onto the RAM 11 by the CPU 10 and executing it on the printer 1. On the control unit 100, an authentication information generation unit 103 and a connection management unit 104 are constructed. The control unit 100 performs, for example, a process of displaying the interface screen information on the display device 14 and a transition process of the interface screen information according to the operation by the user received via the input device 15. The screen information is stored in advance in the flash memory 12, for example. In addition, the control unit 100 controls the communication device 13 that performs wireless LAN connection and communication using the authentication information generation unit 103 and the connection management unit 104.

The storage unit 105 is realized, for example, by the flash memory 12 when data is stored continuously, and is realized by the RAM 11 when data is temporarily stored. Since the connection terminal information 1051 needs to be retained even after the printer 1 is turned off, the connection terminal information 1051 is preferably stored in the flash memory 12.

The authentication information generation unit 103 receives an instruction to generate authentication information via the input device 15,
Authentication information is generated, and the authentication information is converted into image data and displayed on the display device 14.

Specifically, the authentication information generation unit 103 generates arbitrary authentication information 1054 using random numbers for each partner terminal to be connected. The authentication information 1054 is, for example, a number string, a character string, or a combination of numbers and characters, and a PIN code set in Enrollee,
It can be information including setting information related to the network and encryption. Further, the generated authentication information 1054 is converted into a barcode or image data and displayed on the display device 14. The image data includes a two-dimensional barcode and a design barcode. The generated authentication information 1054 is managed by the connection management unit 104 and used for communication and connection processing in the communication device 13.

The connection management unit 104 manages connection with the partner terminal. Further, when the communication device 13 performs a connection process for communication with the partner terminal using the authentication information 1054 generated by the authentication information generation unit 103, the communication device 13 performs authentication of the partner terminal.

Specifically, the connection management unit 104 manages identification information (connection terminal information 1051) for identifying a partner terminal to be connected using the storage unit 105. The connection terminal information 1051 includes, for example, the MAC address 1052 of the counterpart terminal, the connection type 1053 (one-time or permanent),
And authentication information 1054. One-time means that the authentication information used for connection processing is
This means that the connection can only be used once. If the connection is disconnected, it cannot be reconnected using the same authentication information. Permanent means that the same authentication information can be used any number of times. Accordingly, when the connection using the one-time authentication information 1054 is disconnected, the connection management unit 104 connects the connection terminal information 1 for the terminal.
051 is deleted from the storage unit 105. The same applies when the printer 1 is turned off. The connection terminal information 1051 of the terminal connected using the permanent authentication information 1054 is not deleted when the connection is disconnected and the printer 1 is turned off.

In the connection process performed by the communication device 13, the connection management unit 104 determines whether the authentication information used by the partner terminal for the connection process matches the authentication information 1054 generated by the authentication information unit. If it is determined that the authentication information does not match, the communication device 13 is made to stop the connection process. When the authentication information matches and the connection process is completed, the connection terminal information 1051 for the terminal is stored in the storage unit 105. In addition, when the connection terminal information 1051 is stored in the storage unit 105 and another terminal requests connection processing using the same authentication information as the authentication information 1054 included in the connection terminal information 1051, the MAC It is determined whether the addresses 1052 match. If the MAC addresses do not match, the communication device 13 is made to stop the connection process.

Next, wireless LAN connection control according to the first embodiment will be described with reference to FIG. Here, description will be made assuming that the user connects the digital camera to the printer.

First, the control unit 100 displays screen information (not shown) that prompts the user a for operation input on the display device 14. The screen information is, for example, a menu screen that displays a list of various functions of the printer. In the function list, an item for establishing a wireless LAN connection between the user terminal and the printer is displayed. The control unit 100 receives the operation of the user a through the input device 15 and displays screen information corresponding to the selected item. When an item for establishing a wireless LAN connection is selected, screen information shown in FIG. 5 (5-A) is displayed.

Here, screen information for performing wireless LAN connection will be described. The screen information for performing the wireless LAN connection is configured as shown in FIG. 5, for example. Each screen information has a title area 501 and a main area 502. In the title area 501, a screen title is displayed. In the main area 502, item buttons for performing settings, transition of screen information, and the like are displayed.

The screen information (5-A) is a screen for prompting the user to input whether to perform wireless LAN connection by manual setting or simple setting. The main area 502 includes a Cancel button 503 for returning to the screen information displayed before the screen information, a manual setting button 510 for starting manual setting, and an easy setting button for starting simple setting. 511 is displayed.

The screen information (5-B) is displayed when the simple setting button is selected in the screen information (5-A). In the main area 502, a Cancel button 503 for returning to the screen information displayed before the screen information, a one-time button 512 for displaying authentication information for one-time connection, and a permanent connection A permanent button 513 for starting the setting of authentication information is displayed.

The screen information (5-C) is displayed when the permanent button 513 is selected in the screen information (5-B). In the main area 502, a Cancel button 503 for returning to the screen information displayed before the screen information, a new button 514 for displaying authentication information for permanent connection, and setting for permanent connection are started. An option button 515 is displayed.

The screen information (5-D) is displayed when the one-time button 512 is selected in the screen information (5-B) and when the new button 514 is selected in the screen information (5-C). In the main area 502, an area 517 for displaying authentication information 516 that is image data and an OK button 504 for deleting the displayed authentication information 516 are displayed.

The control unit 100 displays the above screen information on the display device 14 and accepts an instruction from the user a via the input device 15. When the one-time button 512 is selected in the screen information (5-B), or when the new button 514 is selected in the screen information (5-C), the authentication information generation unit 103 selects the selected type one-time Alternatively, authentication information 1054 corresponding to permanent is generated using a random number. Further, the authentication information generation unit 103 includes authentication information 1054.
Is converted into image data to generate authentication information 516, and the authentication information 516 is displayed on the display device 14. Since the authentication information 1054 is used for authentication of the connection process, the connection management unit 104 stores the authentication information 1054 and its type in the storage unit 105 as connection terminal information 1051 (S301).

Next, the digital camera 2a captures the authentication information 516 in accordance with an instruction from the user a (S
302). The digital camera 2a analyzes the photographed image, and character string authentication information 1054.
Is extracted (S303). Further, a wireless LAN connection process with the printer 1 is started using the authentication information (S304). The wireless LAN connection process may be started automatically after extraction of the authentication information 1054, or may be started after displaying screen information prompting the user to receive an instruction input.

When connection processing with the digital camera 2a is started by the communication device 13, the connection management unit 10
4 determines whether the authentication information used in the connection process matches the authentication information 1054 stored in the storage unit 105. If they match, it is determined whether the connection process has been started within a predetermined time after displaying the authentication information 516 (S305). If it is determined that the time has been exceeded, the display of the authentication information 516 is invalidated (erased), the authentication information 1054 stored in the storage unit 105 is deleted, and the communication device 13 ends the connection process (S308). )
. If it is determined that the time is within the time period, after the connection process is completed, the display of the authentication information 516 is invalidated (erased), the MAC address of the digital camera 2a is set as the connection terminal information 1051, and the type 1053 and the authentication information 1054. And stored in the storage unit 105 (S306).
). Note that the MAC address of the digital camera 2a can be acquired from the MAC frame received during the connection process. After invalidating the display of the authentication information 516, for example, a menu screen displaying a list of various functions of the printer may be displayed.

As described above, the digital camera 2a and the printer 1 are connected by the wireless LAN. Thereafter, the digital camera 2a can transmit image data to the printer 1, for example. The printer 1 can print the image data.

Here, it is assumed that the authentication information 516 displayed by the operation of the user a is taken by the digital camera 2b according to the instruction of the user b (S302b). The digital camera 2b analyzes the photographed authentication information 516 and extracts the authentication information 1054 (S303b). Also, a wireless LAN connection process with the printer 100 is started using the authentication information (S304b). The apparatus that captures the authentication information 516, the apparatus that extracts the character string authentication information 1054 from the image data, and the apparatus that uses the authentication information to connect to the printer via a wireless LAN may be different. Some combinations of the above may be used.

When connection processing with the digital camera 2b is started by the communication device 13, the connection management unit 10
4 determines whether the authentication information used in the connection process matches the authentication information 1054 stored in the storage unit 105. If they match, the MA corresponding to the authentication information 1054
It is determined whether the C address 1052 matches the source MAC address of the MAC frame received in the connection process (the MAC address of the digital camera 2b) (S307). If the MAC addresses do not match, the connection of the digital camera 2b is regarded as impersonation and the communication device 13
The connection process is terminated (S308).

Next, connection control using permanent or one-time authentication information will be described with reference to FIG. Here, it is assumed that the digital camera 2a uses the permanent connection authentication information 1054 and the digital camera 2b uses the one-time connection authentication information 1054 to complete the wireless LAN connection with the printer. Accordingly, the storage unit 105 stores the MAC of the digital camera 2a.
Address 1052, type (permanent) 1053, authentication information 1054, and MAC address 1052, type (one-time) 1053, authentication information 1054 of the digital camera 2b are stored as connection terminal information 1051.

When the printer 1 is turned off or the wireless LAN connection is disconnected, the connection management unit 104
The connection terminal information 1051 for the digital camera 2b whose type 1053 is one-time is deleted (S309). Connection terminal information 1 of the digital camera 2a whose type 1053 is permanent
051 is not deleted.

After that (when the power is off, after the power is turned on), when the communication device 13 starts the connection process with the digital camera 2a or 2b, the connection management unit 104 uses the authentication information used for the connection process. Is identical to the authentication information 1054 stored in the storage unit 105 (S307). In the case of the digital camera 2a, since the type 1053 is permanent, it matches the authentication information 1054 stored in the storage unit 105, and also matches the MAC address 1052, so the connection management unit 104 sends the connection process to the communication device 13. To the end. On the other hand, in the case of the digital camera 2b, since the type 1053 is one-time, it is not stored in the storage unit 105, and the connection management unit 104 causes the communication device 13 to end the connection process (S30).
8). In order for the digital camera 2b to connect to the printer 1, newly generated authentication information 1
It is necessary to use 054.

The first embodiment has been described above. According to the first embodiment, wireless LAN communication is possible in direct communication between terminals with a simple interface, and even if authentication information is voyeurized, connection other than a specific terminal is restricted and security is improved. Can be increased. Further, by invalidating the display of the authentication information when the connection process is completed, the user can be made aware that the terminal has been successfully connected. Then, when the display of the authentication information displayed by the user is invalidated before it is photographed, the user can be made aware that the authentication information has been voyeurized and used by others. Further, by using one-time authentication information, it is possible to prevent an increase in permanent authentication information that may be leaked and to further increase security.

The printer may have screen information (5-E) as shown in FIG. Displayed when option 515 is selected in the screen information (5-C). Main area 502
Is a Cancel button 503 for returning to the screen information displayed before the screen information.
And a permanent connection setting button 518 for selecting whether to enable or disable the permanent connection (only one-time connection can be used if it is disabled), and the number of terminals that can be permanently connected A permanent connection number setting button 519 for performing the connection, and a permanent connection deletion button 520 for deleting the permanent connection in which the connection terminal information is stored in the storage unit 105 are displayed.

If the permanent connection is set to be invalid, the authentication information generation unit 103 does not generate the authentication information 1054 for the permanent connection, for example, the authentication information 516 in the screen information (5-D).
Instead, it can be displayed that the permanent connection is invalid. In printers used in public places, it is effective to prevent access due to leakage or eavesdropping of permanent connection authentication information. Moreover, the limitation on the number of permanent connections is effective in that the possibility of leakage of authentication information and eavesdropping can be reduced.

The present invention has been described in connection with exemplary embodiments. Obviously, many alternatives, modifications, and variations will be apparent to practitioners skilled in this art. Accordingly, the above-described embodiments of the present invention are intended to illustrate and not limit the gist and scope of the present invention.

1 is a block diagram showing an outline of a system to which a first embodiment is applied and an internal configuration of a printer. FIG. 2 is a block diagram illustrating functions of a printer to which the first embodiment is applied. FIG. 3 is a sequence diagram for explaining control of wireless LAN connection according to the first embodiment. FIG. 3 is a sequence diagram for explaining control of wireless LAN connection according to the first embodiment. FIG. 3 is a diagram illustrating an example of screen information included in the printer according to the first embodiment. FIG. 3 is a diagram illustrating an example of screen information included in the printer according to the first embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Printer, 2 ... Digital camera, 10 ... CPU, 11 ... RAM,
DESCRIPTION OF SYMBOLS 12 ... Flash memory, 13 ... Communication apparatus, 14 ... Display apparatus, 15 ... Input device, 16 ... Image processing part, 17 ... Print engine, 100 ... Control part, 103
... Authentication information generation unit, 104 ... Connection management unit, 105 ... Storage unit, 1051 ...
Connection terminal information, 1052... MAC address, 1053... Type, 1054... Authentication information, 501... Title area, 502... Main area, 503.
l button, 504 ... OK button, 510 ... manual setting button, 511 ... easy setting button, 512 ... one time button, 513 ... permanent button, 514 ... new button, 515 ..Option buttons, 516 ... authentication information, 517 ... area, 5
18 ... permanent connection setting button, 519 ... permanent connection number setting button, 520 ... permanent connection deletion button.

Claims (5)

A printer that performs wireless communication with an external terminal,
An input device that accepts user operations;
A display device for displaying screen information;
A communication device for performing wireless communication;
A storage device for storing identification information for identifying the connected terminal;
A central processing unit having a function of controlling wireless communication,
The central processing unit is:
Connection management means for managing connection with the terminal;
An operation for generating authentication information used for wireless communication is received via the input device, the authentication information is generated, and authentication information generating means for displaying the authentication information on the display device,
The connection management means includes
When the communication device establishes a wireless communication connection with the terminal using the authentication information, the identification information of the connection is stored in the storage device,
In the subsequent wireless communication connection process, it is determined whether the identification information stored in the storage device matches the identification information used in the wireless communication connection process. Ending the wireless communication connection process,
Printer characterized by. The printer according to claim 1,
The connection management means includes
When the communication device establishes a wireless communication connection with the terminal using the authentication information, the identification information of the connection is stored in the storage device and the authentication information displayed on the display device is displayed. Disabling,
Printer characterized by. The printer according to any one of claims 1 and 2,
The printer, wherein the identification information includes the authentication information and a MAC address of the terminal. The printer according to claim 3,
The authentication information generating means
An operation for generating one of the first authentication information and the second authentication information is received via the input device, and authentication information corresponding to the operation is generated.
The connection management means includes
When the communication device establishes a wireless communication connection with the terminal using the first or second authentication information, the identification information of the connection is stored in the storage device,
When the communication device disconnects the wireless communication connection using the first authentication information, the identification information corresponding to the connection is deleted from the storage device;
Printer characterized by. The printer according to claim 4,
The display device
A first screen having an item for displaying the first authentication information, and an item for displaying the second authentication information;
Displaying a second screen having an area for displaying the authentication information generated by the authentication information generating means;
Printer characterized by.

Images